Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa
File: uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa (raw, json)
Hash identifier: OGUiJNuUA+4RM8D8fSwbQDp/GrlNdWNfd8TIRpipQ6E=
Subject key identifier: BB:20:DD:EB:F5:A7:5B:96:F8:D9:B5:BF:22:68:CF:E5:9B:C3:AA:97
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 019F7EB45107E9F41A0543E2F810D0CEA99C
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa
Signing time: Mon 20 Jul 2026 08:46:14 +0000
ROA not before: Mon 20 Jul 2026 08:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 89.38.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:b4:51:07:e9:f4:1a:05:43:e2:f8:10:d0:ce:a9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jul 20 08:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb20ddebf5a75b96f8d9b5bf2268cfe59bc3aa97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:3a:24:e3:5b:85:40:4c:61:2f:45:c5:73:
7f:1a:d1:93:95:06:93:21:24:09:41:1a:f9:ee:0d:
e9:ba:19:4c:46:94:d1:bd:14:b5:5f:52:57:e6:5a:
a1:81:f7:93:af:96:10:ba:62:fc:55:58:45:6b:cc:
dc:8a:56:ea:48:5d:d4:46:b3:ee:cb:1e:2d:4f:6c:
64:e2:da:a0:eb:31:62:1d:29:78:b7:7d:82:ed:b9:
5e:cf:02:2b:7e:8a:53:c4:84:f6:18:18:ab:2b:7c:
7b:b7:15:2e:fa:70:56:6b:62:49:22:61:1d:f6:f3:
a9:b5:fb:67:0a:5a:6b:4a:f1:e2:67:15:f4:9c:5a:
99:1b:ba:98:0f:4a:f4:d3:d6:fb:f0:4f:f3:9d:3d:
69:44:6d:9c:74:07:d3:c0:c7:4e:6c:85:05:54:ad:
ea:b6:44:d3:c1:ab:b8:72:d1:30:3c:6f:6d:73:50:
18:29:59:05:5b:6e:b7:d7:6a:db:ae:00:e2:d2:6b:
40:dd:46:c0:a9:db:8c:76:4d:88:ce:d5:df:b6:b4:
54:66:e0:e4:3e:c8:48:fa:5e:8e:96:83:01:31:f5:
ea:4c:0b:a7:d9:e8:78:74:05:6a:9a:79:e2:f2:57:
6e:77:17:c3:c0:c5:e3:bd:96:48:e1:b1:73:7e:f2:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:DD:EB:F5:A7:5B:96:F8:D9:B5:BF:22:68:CF:E5:9B:C3:AA:97
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uyDd6_WnW5b42bW_ImjP5ZvDqpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a9:eb:82:40:88:62:d3:40:dc:48:14:44:d4:2f:2e:4d:23:
2e:10:e0:84:69:04:89:bf:00:ae:dc:9b:35:bf:f1:ee:ab:c9:
51:a1:60:b5:bb:c4:bb:57:f5:8b:c3:62:69:fa:67:52:e2:14:
b4:6a:70:28:88:2b:5d:f2:2a:92:0d:0c:49:2a:ff:60:bb:08:
d2:cc:84:af:46:f1:57:57:be:3a:c2:07:54:83:9b:c3:ea:b7:
b8:12:e0:85:01:7b:cc:7b:8f:d0:98:a1:11:6a:69:85:21:fc:
e4:11:b4:c0:6e:fc:8d:b9:44:ee:79:9c:2a:07:1c:a3:c2:d0:
3f:4a:34:17:0f:6b:20:9c:db:23:c8:9b:33:4b:e1:f3:9c:3e:
5a:65:50:8b:c9:a4:9c:4e:ac:0a:5b:4e:0a:02:7a:f4:41:d5:
73:28:af:b2:c6:09:2a:b8:01:cd:40:db:73:c3:8b:66:dd:dc:
52:90:cf:f2:75:44:d0:70:41:88:a7:35:ec:57:46:0a:52:30:
96:0d:2c:ae:9f:9b:76:62:25:1e:e2:76:91:7d:1a:38:d5:de:
f0:8c:30:cc:f6:39:1d:60:1a:39:6c:30:b4:8a:cf:86:21:18:
e4:50:6f:60:26:73:4f:a7:e2:cb:d7:0e:b2:ba:b6:35:3f:b4:
78:92:45:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:25 2026 by rpki-client